nerdexam
Check_Point

156-215.76 · Question #310

Why are certificates preferred over pre-shared keys in an IPsec VPN?

The correct answer is B. Weak Security: PSK are static and can be brute-forced. See the full explanation below for the reasoning.

Question

Why are certificates preferred over pre-shared keys in an IPsec VPN?

Options

  • AWeak security: PSKs can only have 112 bit length.
  • BWeak Security: PSK are static and can be brute-forced.
  • CWeak scalability: PSKs need to be set on each and every Gateway.
  • DWeak performancE.PSK takes more time to encrypt than Diffie-Hellman.

How the community answered

(25 responses)
  • A
    16% (4)
  • B
    72% (18)
  • C
    8% (2)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full 156-215.76 Practice